Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa
File:                     413e9f7d-2d3d-3845-aa41-861d68125bfb.roa (raw, json)
Hash identifier:          7Qk/Dcnl5aARvVChanBEL7+kiQ6KfRFBYNf/RXOYuJ0=
Subject key identifier:   B1:F5:0C:1B:81:00:3D:5F:C7:43:AF:4D:B0:A0:11:18:0F:56:89:85
Certificate issuer:       /CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
Certificate serial:       010D0C9F4328584D40CA5AF35D58733ADB904F10
Authority key identifier: B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        66.45.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:5a:f3:5d:58:73:3a:db:90:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=0333c29a-e6b8-4723-b77d-21ec68b146ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:0b:fe:0b:4c:d8:ad:5f:6e:2f:d3:a4:51:
                    93:ed:37:c2:64:bd:0d:ab:ad:c6:ca:a6:fa:c6:55:
                    1b:4b:73:f9:85:81:5e:c9:1d:2b:75:2a:a7:72:a2:
                    48:a5:fa:bd:cf:63:12:32:0f:00:2c:dc:e3:1c:1c:
                    34:5e:f0:be:e3:f3:39:71:10:00:4c:b1:24:cf:d8:
                    28:8b:a7:3f:77:4c:90:1e:42:58:f4:17:33:2d:e3:
                    fc:bd:9d:cf:ed:4a:e8:e9:57:76:63:d2:9e:af:07:
                    fe:79:e0:74:ab:c3:68:39:45:b2:38:53:0a:35:72:
                    73:1d:88:93:39:5d:f4:38:bb:8d:ce:1a:03:52:ff:
                    9e:e6:bb:b4:73:e0:1e:dd:10:a0:45:b8:01:3a:19:
                    07:9a:c3:0e:dd:de:c6:2e:1d:b6:61:41:d7:74:7b:
                    79:0f:6d:95:98:4d:c9:f3:d7:ba:2d:4d:18:c5:54:
                    f2:96:f4:f2:2b:74:35:04:a6:6c:c9:a8:f7:45:f5:
                    69:2d:65:78:42:7e:7f:58:45:07:c4:82:09:4d:be:
                    05:0c:83:9e:e4:dd:d1:6d:05:d3:97:fb:42:44:26:
                    f1:31:17:3a:cc:de:27:10:77:60:8e:05:98:23:ef:
                    d1:d2:39:fc:b3:c8:df:1b:5f:35:a9:1b:9d:d4:e0:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:0C:1B:81:00:3D:5F:C7:43:AF:4D:B0:A0:11:18:0F:56:89:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/413e9f7d-2d3d-3845-aa41-861d68125bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl

            X509v3 Authority Key Identifier:
                keyid:B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a3:88:e9:b6:17:ae:ad:c1:ec:f9:98:31:a8:4c:b3:3c:ca:
         0e:be:d2:44:c3:df:2b:8d:28:13:ea:0c:9a:d4:ee:3e:fe:cd:
         1d:88:b2:e8:02:54:84:26:61:70:69:1d:ac:1f:06:f2:eb:f3:
         34:3c:27:dd:14:b1:c0:53:27:23:8d:b0:5d:61:cb:65:41:39:
         aa:4b:9e:1e:d7:8c:6e:1b:27:93:7b:e1:a6:67:d5:7c:3b:b2:
         99:76:49:f8:59:fe:47:66:39:cf:f8:f0:30:90:27:13:c1:8e:
         55:8c:46:27:4c:f2:89:97:df:c7:8e:12:46:67:66:09:19:78:
         28:48:44:7b:f5:ed:02:b6:a5:3a:44:f4:75:2a:27:89:72:70:
         a4:7c:c3:f4:9d:e3:d3:b3:a4:20:63:bb:84:12:e5:7e:9e:0c:
         34:d6:c4:7b:81:86:10:c0:dd:4c:e4:76:de:28:2f:45:32:91:
         d1:ca:c0:1a:33:8c:3c:78:f5:23:bb:f3:da:63:d5:be:d6:48:
         84:eb:cb:43:74:41:54:45:b5:13:75:6d:f1:04:ab:69:d0:d8:
         47:3e:dc:3f:b2:47:13:7b:72:ff:5d:51:0a:c1:b3:2a:c1:f6:
         5d:1d:c6:c9:e4:a4:42:1e:7d:73:f6:9d:2a:9d:60:61:b3:b5:
         b1:08:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:58 2026 by rpki-client